$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa File: c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa (raw, json) Hash identifier: z/828Lbk7onCbcNhruCEcpiqgUo6uIhtpoAbh1AF7nA= Subject key identifier: DE:5B:34:29:A8:E4:55:49:66:42:98:00:8C:AC:90:B0:37:06:D3:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B54B9FF8E2569E258D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36632 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b5:4b:9f:f8:e2:56:9e:25:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=1a048b28-ebff-456a-b4d7-8d5d28f27932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:49:b2:90:97:69:92:8a:a8:26:59:9c:03: 2c:62:4b:1c:5a:60:9b:52:17:61:2c:d1:a7:5e:38: 94:8a:c7:b0:cf:7b:89:bd:fc:04:88:0a:fd:37:83: e7:73:1d:7b:36:4a:bc:c8:5d:8c:13:af:c2:91:83: ed:8f:0c:2d:97:4d:a1:ab:01:73:48:26:bc:18:6a: 56:9c:da:2d:cf:aa:54:57:fd:a0:24:97:9b:c2:cf: ec:e8:0a:60:8a:4e:40:3e:7f:34:92:b0:dd:c7:1b: 38:72:46:2f:3a:44:ed:e5:52:c4:72:6c:2e:e9:30: 5d:50:c2:e8:15:8f:e8:41:3a:3c:46:63:78:23:0a: 25:ea:fc:42:20:1a:4f:3e:56:43:ed:15:3b:db:6b: e1:c3:c3:a6:03:ca:52:e2:23:a8:4b:f9:d9:43:05: eb:40:de:e1:b2:61:8d:8d:cc:9e:11:fd:19:5e:b2: e3:cd:6c:53:bb:86:8e:5f:e8:f4:b7:09:77:7b:06: 3b:38:94:d3:9c:cb:89:10:a3:51:c2:e1:ac:e9:8d: 2b:1d:23:0f:f5:36:4a:b6:85:1d:16:9d:cf:8c:7d: 09:fe:7e:c4:c6:ec:b4:77:94:dd:a2:5c:e1:fc:69: 3b:d9:d3:11:97:56:b1:6a:09:fe:04:c7:f6:75:5c: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5B:34:29:A8:E4:55:49:66:42:98:00:8C:AC:90:B0:37:06:D3:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d0:fc:ed:06:ea:37:5d:b0:d6:0a:69:f2:c8:a2:9f:14:9d: de:e9:35:48:54:5c:08:8f:f2:a9:a7:6e:dd:22:dc:49:64:17: 78:64:8e:55:2a:27:cc:9e:17:7e:4b:68:82:ec:c7:ab:d0:57: ca:a7:b3:d7:ca:49:ff:e6:67:28:75:7e:d2:86:95:2f:df:12: 9b:72:ed:f6:66:27:e8:3c:07:0f:92:00:94:12:d8:b6:8d:5d: 53:23:d2:e4:33:e7:82:e7:4c:90:77:76:b6:87:9d:74:38:d5: 23:97:99:51:a8:1f:a8:24:f1:6f:e2:df:44:4e:b6:06:52:a7: 1d:41:e4:b0:06:80:59:10:b5:fd:a4:b2:9c:9e:40:86:c2:fd: ab:f8:73:1d:76:87:cf:51:6c:b2:17:d2:1a:e6:46:1d:d6:8e: 30:ff:02:3e:b5:bf:d1:6c:95:ed:04:50:d7:f0:11:8b:5e:0c: 7a:ff:1c:a8:96:c4:fe:8c:e9:d5:17:db:34:a3:48:bd:94:c5: 09:0d:40:82:59:80:13:e3:c1:10:e6:73:0f:4a:6e:0e:88:af: a3:a8:fa:34:17:63:51:27:0a:0b:12:ac:b2:cf:3e:d6:9d:f4: f3:60:bc:9d:b7:33:f6:4a:ae:0e:63:ba:ba:20:ac:b5:2d:2a: 26:7c:27:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7VLn/jiVp4ljYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWEwNDhiMjgtZWJmZi00NTZhLWI0ZDctOGQ1ZDI4ZjI3OTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpdJspCXaZKKqCZZnAMsYkscWmCbUhdhLNGn XjiUisewz3uJvfwEiAr9N4Pncx17Nkq8yF2ME6/CkYPtjwwtl02hqwFzSCa8GGpW nNotz6pUV/2gJJebws/s6Apgik5APn80krDdxxs4ckYvOkTt5VLEcmwu6TBdUMLo FY/oQTo8RmN4Iwol6vxCIBpPPlZD7RU722vhw8OmA8pS4iOoS/nZQwXrQN7hsmGN jcyeEf0ZXrLjzWxTu4aOX+j0twl3ewY7OJTTnMuJEKNRwuGs6Y0rHSMP9TZKtoUd Fp3PjH0J/n7Exuy0d5Tdolzh/Gk72dMRl1axagn+BMf2dVymsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN5bNCmo5FVJZkKYAIyskLA3BtPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJjN2E3NDEtMDQyMy0z YjlkLTk3NjktYTFmODBkZTJmOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBk0PztBuo3XbDWCmnyyKKfFJ3e6TVIVFwIj/Kpp27dItxJZBd4ZI5V KifMnhd+S2iC7Mer0FfKp7PXykn/5mcodX7ShpUv3xKbcu32ZifoPAcPkgCUEti2 jV1TI9LkM+eC50yQd3a2h510ONUjl5lRqB+oJPFv4t9ETrYGUqcdQeSwBoBZELX9 pLKcnkCGwv2r+HMddofPUWyyF9Ia5kYd1o4w/wI+tb/RbJXtBFDX8BGLXgx6/xyo lsT+jOnVF9s0o0i9lMUJDUCCWYAT48EQ5nMPSm4OiK+jqPo0F2NRJwoLEqyyzz7W nfTzYLydtzP2Sq4OY7q6IKy1LSomfCeG -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:40 2026 by rpki-client